CB Response: Process Search Page Count is Incorrect when Group By Process is Used

Products

• Carbon Black EDR (formerly Cb Response)

Issue/Introduction

When selecting "Group By Process" in the process search page, the output may display less than the default 10 entries and multiple empty pages

Environment

• Carbon Black Response: All Versions

Cause

The count is based on the actual number of process documents returned by Solr, one for each process segment. The count is not adjusted accordingly when combined using "Group By Process"

Resolution

• This is only a visual impact and is not a reflection on missing data
• CB-23709 is an enhancement request to correct this in a future version

Additional Information

• CB-23709 also affects other group_by results using the API
• Please subscribe to this article for updates on the fix